Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea38bd-0ed4-3905-af41-add7722a214e.roa
File: 8bea38bd-0ed4-3905-af41-add7722a214e.roa (raw, json)
Hash identifier: MKbJENOqHwhRzV2+e9naY42c+6eh4KUs1ujgKYSFmH4=
Subject key identifier: A1:CF:2D:0A:DA:DF:FD:57:41:3C:5A:11:52:A3:AB:AF:20:58:B2:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A1E11BF11DD741C99DBB1A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea38bd-0ed4-3905-af41-add7722a214e.roa
Signing time: Thu 19 Jan 2023 12:00:00 +0000
ROA not before: Thu 19 Jan 2023 12:00:00 +0000
ROA not after: Fri 24 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a1:e1:1b:f1:1d:d7:41:c9:9d:bb:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 12:00:00 2023 GMT
Not After : Feb 24 05:00:00 2023 GMT
Subject: CN=b5e9db69-bdc5-4dab-8c9c-6a46de117662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:71:06:1f:2b:20:85:dc:80:5b:4a:d0:1e:5a:
ce:d5:0f:77:67:6a:b9:7d:a1:7a:eb:03:85:2a:88:
71:62:f7:90:40:29:7a:ee:c2:69:8a:32:81:1f:04:
14:a6:2d:1a:65:83:8f:00:1b:6f:00:60:23:29:12:
73:c5:88:ca:27:a1:dc:23:cd:31:d6:82:98:ef:fa:
6a:11:b7:ed:4f:f7:d4:a3:71:72:a9:2b:fd:e9:ca:
77:ef:cc:d8:96:7a:76:4b:9f:9b:bc:8d:af:66:97:
8f:6c:17:17:37:67:d5:ce:f0:1e:c1:bb:fa:8a:c2:
1f:c0:ca:6e:24:78:bd:07:60:f4:d6:da:63:8b:12:
b6:fa:1a:83:ed:29:f5:7f:ae:a9:c3:a9:a0:b2:91:
d8:9d:dc:32:31:07:8a:20:41:95:91:7c:ed:fa:b6:
22:ee:79:7e:87:72:ad:98:e1:b6:1d:df:12:01:90:
8d:1d:2a:ae:0e:c7:f9:f9:92:5c:f6:1b:2e:92:d7:
b4:b4:4a:25:96:08:7f:a7:ff:f9:31:74:c2:af:9c:
ed:04:a2:78:38:33:86:4c:2d:af:84:23:7a:d4:f7:
db:17:d4:ec:2f:47:11:c7:34:19:12:d0:a2:15:2e:
0c:df:bd:54:ff:4f:31:ae:3e:a0:62:85:80:3c:28:
c6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:2D:0A:DA:DF:FD:57:41:3C:5A:11:52:A3:AB:AF:20:58:B2:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8bea38bd-0ed4-3905-af41-add7722a214e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.229.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:88:5b:26:f4:15:d3:d9:ea:99:2f:64:1a:29:f6:86:cc:88:
cd:59:15:66:ed:5f:fc:ae:40:2f:45:05:f7:21:e3:28:c5:22:
97:60:c2:c0:50:2e:b9:5f:76:29:62:bb:fd:2d:ac:aa:81:99:
3a:ad:c4:ba:e7:66:15:bf:1e:f8:82:a1:4a:cc:55:1a:f0:86:
da:a7:ea:d6:12:92:42:47:d9:56:93:73:c6:41:2d:9e:40:1f:
2c:43:2e:6a:7b:fa:3a:7c:14:4e:03:43:45:95:34:3c:82:8e:
f4:8a:aa:6c:8f:3a:82:73:89:28:94:4d:95:06:5b:ce:08:dd:
46:cf:d3:ab:c6:cf:37:c7:f8:4d:1c:18:2d:31:f1:48:ee:9f:
59:4b:21:32:f2:91:0d:c7:60:8b:00:18:ef:d7:3b:95:39:4c:
47:08:2d:a1:a1:50:c9:d2:20:f6:1a:8a:9c:0b:35:be:f7:dc:
1a:86:bf:1e:9a:58:27:89:6c:7e:da:a9:7e:67:0b:8f:4e:5d:
67:a4:7f:d9:35:88:01:78:29:fb:0a:62:d4:8a:94:dc:0e:84:
21:80:d8:e6:12:97:06:26:cb:54:54:61:68:ad:09:37:31:c8:
73:0f:07:52:93:6a:5a:35:ae:af:20:4b:f1:25:88:5f:43:01:
0e:a5:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:57:35 2025 by rpki-client